Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/34352e3136352e3235352e302f32342d3234203d3e20323637393334.roa
File:                     34352e3136352e3235352e302f32342d3234203d3e20323637393334.roa (raw, json)
Hash identifier:          Eu5GotbTUzO7n615BNkGUbJLEgaONKXNds8dWBeMRlI=
Subject key identifier:   4E:39:85:10:CC:FC:A5:83:A8:1A:04:25:26:AE:1F:04:A8:06:CA:79
Certificate issuer:       /CN=3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B
Certificate serial:       5513E8C4F6D973D14A6B6F35753B4F162836155C
Authority key identifier: 3F:AF:66:8A:2A:7B:49:E1:C5:1B:F4:8C:7C:EA:FB:6F:AC:37:57:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/34352e3136352e3235352e302f32342d3234203d3e20323637393334.roa
Signing time:             Tue 09 Jul 2024 22:54:35 +0000
ROA not before:           Tue 09 Jul 2024 22:49:35 +0000
ROA not after:            Tue 08 Jul 2025 22:54:35 +0000
asID:                     267934
IP address blocks:        45.165.255.0/24 maxlen: 24

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:13:e8:c4:f6:d9:73:d1:4a:6b:6f:35:75:3b:4f:16:28:36:15:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B
        Validity
            Not Before: Jul  9 22:49:35 2024 GMT
            Not After : Jul  8 22:54:35 2025 GMT
        Subject: CN=4E398510CCFCA583A81A042526AE1F04A806CA79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:83:cc:c2:6d:0e:a3:4c:90:96:05:26:71:cf:
                    05:ca:43:60:47:16:9d:90:cd:13:8a:ec:25:22:07:
                    4e:3f:01:ad:32:f2:8c:58:5b:61:05:22:38:1d:21:
                    20:28:56:6f:0e:31:b9:b6:5b:a4:cc:f7:57:e1:87:
                    c1:6d:00:4c:cf:9c:ef:ee:f1:f8:f8:35:1b:2b:54:
                    fd:ad:6f:39:ff:3e:80:dd:a7:67:6a:88:f3:4c:93:
                    b7:e3:a7:2f:58:d5:13:21:1b:17:dc:fd:12:00:9b:
                    7c:93:b6:2b:e6:2b:2f:83:b6:0a:e4:9c:0a:dc:87:
                    af:44:3f:25:90:38:c0:13:56:14:48:b1:44:1b:36:
                    80:d7:1a:75:a8:c3:76:af:92:50:92:67:d8:1f:d1:
                    82:9f:58:de:05:6c:85:e1:96:ae:6e:2e:7a:14:69:
                    d4:4e:f2:fb:0b:90:43:97:c3:2d:11:2a:43:1c:ed:
                    7a:6c:3c:2f:37:0c:e5:6c:a4:02:66:91:cb:7e:60:
                    69:f2:a9:3c:c1:13:8a:66:35:e0:f5:c1:ea:75:d6:
                    58:5e:0a:0f:88:39:a0:62:3c:d9:f5:ef:a0:3b:bc:
                    36:14:88:27:40:56:f5:c1:21:d1:7d:0d:91:7e:45:
                    90:da:97:e7:79:d3:e7:53:97:6f:17:13:3a:cb:48:
                    0b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:39:85:10:CC:FC:A5:83:A8:1A:04:25:26:AE:1F:04:A8:06:CA:79
            X509v3 Authority Key Identifier:
                keyid:3F:AF:66:8A:2A:7B:49:E1:C5:1B:F4:8C:7C:EA:FB:6F:AC:37:57:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/34352e3136352e3235352e302f32342d3234203d3e20323637393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:03:54:f4:52:85:b5:ca:bc:c7:da:8d:8d:de:b3:05:65:a4:
         29:fe:8d:3b:f1:d2:77:74:6f:fe:77:79:59:73:1c:7f:f1:e5:
         50:b4:80:f9:4d:c2:c4:84:43:b3:1b:9f:c7:4e:4e:c7:d6:e9:
         6d:d3:0d:64:50:a1:8e:7b:70:ca:6e:ac:fb:6a:64:b1:e3:1f:
         c7:66:e3:1e:43:7e:3e:4e:ba:db:7f:8f:ea:13:17:4d:74:ca:
         5d:c2:a2:26:b6:60:c4:29:a2:7d:b2:76:64:bb:e5:60:c2:d1:
         7e:91:03:96:b4:cf:12:a5:7e:a5:01:0c:6a:3a:ff:81:a9:a6:
         50:9d:37:32:75:31:da:41:11:38:69:a2:80:b8:cf:da:95:2f:
         6a:fa:fe:26:fe:15:aa:90:32:03:13:62:ba:f2:97:f4:42:b1:
         74:15:c1:70:37:fe:a1:4c:4a:d0:41:bb:61:cd:86:f9:9c:48:
         9d:1a:eb:4a:ab:7a:14:19:19:67:ee:1b:04:92:d7:33:7b:0d:
         e7:3e:80:f5:b4:5a:e1:a3:8b:a4:fb:74:ef:d6:0a:85:57:e3:
         e1:72:af:4b:7f:e6:b2:cf:59:fc:82:41:7e:cd:9e:a1:8c:fa:
         36:5b:8d:1a:1e:34:ad:07:14:0a:63:ca:eb:4e:4b:f6:49:35:
         61:af:d1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 13:09:05 2024 by rpki-client on console-fra.rpki-client.org